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• An inspector general report revealed that the U.S. Department of Energy failed to address 
suspected cyber-security weaknesses before a July hacking incident that compromised the 
private information of 104,000 employees. - Washington Post (See item 1) 

• The Federal Motor Carrier Safety Administration shut down 52 bus companies December 
in a nationwide crackdown on unsafe motor coach companies. - Associated Press (See 
item 10 ) 

• Nearly 840,000 Horizon Blue Cross Blue Shield members’ personal identifiable 
information was compromised after two laptops were stolen in New Jersey. - WCBS 2 New 
York City (See item 26) 

• Yahoo Mail experienced an outage due to a hardware problem the left some users unable to 
login for multiple days. - IDG News Service (See item 37) 
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Energy Sector 



1. December 11, Washington Post - (National) DOE was aware of security issues that 
exposed employees to hackers. The U.S. Department of Energy’s (DOE) inspector 
general released a report December 1 1 stating that the DOE failed to address suspected 
cyber-security weaknesses before a July hacking incident that compromised the private 
information of 104,000 employees, their dependents, and contractors. The report also 
found several other discrepancies with the department’s security controls and safety 
standards. 

Source: http://www.washingtonpost.com/blogs/federal-eve/wp/2013/12/ll/doe-was- 
aware-of-security-weaknesses-that-led-to-hacking-report-says/ 

2. December 11, KOMO 4 Seattle - (Washington) Copper theft suspects posing as 
Cherokee charity face charges. Two men accused of posing as Cherokee Indians were 
charged after conning Seattle City Light and others out of 42,500 pounds of copper 
wire worth $120,000 after they claimed the copper was to be donated to a children’s 
charity. The utility agreed to donate a stockpile of copper wiring set aside for recycling 
after the men convincingly posed as individuals running a children’s’ arts and crafts 
program. 

Source: http://www.komonews.com/news/local/Copper-theft-suspects-posing-as- 
Cherokee-charity-now-face-charges-235494941.html 

3. December 10, U.S. Department of Labor - (New Jersey) US Labor Department’s 
OSHA cites industrial gas manufacturer Welco Acetylene Corp. for 19 serious 
safety violations at Newark facility. Welco Acetylene Corp., was cited with 19 
serious safety violations and a proposed fine totaling $49,200 by the U.S. Department 
of Labor’s Occupational Safety and Health Administration December 10 after a 
mandatory inspection of its repackaging facility in Newark. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=25221 

T Return to top i 

Chemical Industry Sector 

For another story, see item 19 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 



4. December 11, U.S. Department of Labor - (Connecticut) Plantsville, Conn., 

automotive metal forging company cited by the U.S. Labor Department’s OSHA 
for repeat and serious safety and health violations. The Occupational Safety and 
Health Administration cited Plantsville-based JJ Ryan Corporation’s Rex Forge 
Division for 5 repeat and 16 serious safety and health violations. Proposed fines totaled 
$112,068. 

Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES &p id=25227 

[ Return to top ] 



Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

5. December 12, Softpedia - (International) Cybercriminals trick unsuspecting U.S. 
users into delivering goods to Russia. Researchers at Trend Micro monitored a 
cybercrime ring that recruits and uses individuals as mules in the U.S. to launder stolen 
money by sending them items bought with stolen payment card information and then 
having the mules ship the items on to Russia or Ukraine. Some items sent in this way 
are subject to export restrictions. 

Source: http://news.softpedia.com/news/Cybercriminals-Trick-Unsuspecting-US- 
Users-into-Delivering-Goods-to-Russia-408711.shtml 

6. December 12, U.S. Securities and Exchange Commission - (International) SEC 

charges London-based hedge fund advisor and U.S.-based holding company for 
internal control failures. GLG Partners L.P. and its former holding company GLG 
Partners Inc., agreed to pay the U.S. Securities and Exchange Commission almost $9 
million to settle charges that the company failed to have adequate internal controls, 
resulting in the overvaluation of a fund’s assets and inflated revenues from fees for the 
company. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370540491613 

7. December 11, Inland Valley Daily Bulletin - (California) Redlands police arrest man 
in Button-Down Bandit bank robberies. Police in Redlands December 1 1 arrested a 
man believed to be the “Button-Down Bandit”, a suspect linked to six bank robberies in 
the area. 

Source: http://www.redlandsdailvfacts.com/general-news/20131211/redlands-police- 
arrest-man-in-button-down-bandit-bank-robberies 
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For additional stories, see items 35, and 36 
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Transportation Systems Sector 

8. December 12, Associated Press - (Hawaii) Airline owner: Engine failed in Hawaii 
plane crash. An accident involving a Makani Kai Air plane that crashed into the water 
off the island of Molokai, killed the Hawaii Department of Health director while eight 
others onboard survived and were rescued December 11. 

Source: http://abcnews.go.com/US/wireStorv/small-plane-crashes-water-off-molokai- 
hawaii-2 1187906 

9. December 12, WNYW 5 New York City - (New York) George Washington Bridge 
reopens. Emergency roadway repairs prompted the closure of all lanes of the upper 
level, New Jersey-bound George Washington Bridge December 11, causing severe 
traffic on all approaches to the bridge in New York City until it was reopened 
December 12. 

Source: http://www.mvfoxnv.com/storv/24198753/george-washington-bridge-lane- 
closures 

10. December 12, Associated Press - (National) Feds shut 52 unsafe bus companies. The 
Federal Motor Carrier Safety Administration announced the shutdown of 52 bus 
companies December 12 in a nationwide crackdown on motor coach companies with 
poor safety records, including lines whose drivers had suspended licenses or worked 
routes of more than 800 miles without rest. 

Source: http://abcnews.go.com/US/wireStory/ap-exclusive-feds-shut-52-unsafe-bus- 
companies-2 1188061 

11. December 11, KXLT-TV 47 Rochester - (Minnesota) State Patrol investigating crash 
involving school bus on Highway 43 near Winona. An accident involving a school 
bus that was hit by another vehicle on Highway 43 at County Road 21 closed the 
highway between Wilson and Winona for an undisclosed amount of time December 11. 
Source: http ://w w w .myfox47 .com/story/24 1 95726/20 13/12/1 1/state-patrol- 
investigating-crash-involving-school-bus-on-highway-43-near- winona 

12. December 11, Myrtle Beach Sun News - (South Carolina) Person killed in crash with 
log truck in Georgetown County. A fatal head-on collision between a semi-truck and 
car on S.C. 51 in Georgetown County, South Carolina, killed one person, sent another 
to the hospital with injuries, and closed the highway for several hours December 11. 
Source: http://www.mvrtlebeachonline.eom/2013/12/l 1/38975 19/person-killed-in- 
crash- with-lo g . html 

13. December 11, Forum of Fargo-Moorhead - (Illinois; Washington; Oregon) Heavy oil 
field freight train traffic forces some Amtrak cancellations through Fargo. Freight 
train congestion combined with winter weather prompted Amtrak to cancel eastbound 
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and westbound Empire Builder route trips, between Chicago to Seattle and Portland, 
from December 13 through the weekend of December 14, which will disrupt service for 
hundreds of customers. 

Source: http://www.inforum.com/event/article/id/420850/ 

14. December 11, WTVJ 6 Miami - (Florida) $10,000 reward in Homestead robbery of 
U.S. Postal service worker. The U.S. Postal Inspection Service is offering up to 
$10,000 for information that leads to the arrest of a suspect who robbed a U.S. Postal 
service mail carrier in Homestead, Florida, and fled the scene on foot December 10. 
Source: http://www.nbcmiami.com/news/10000-Reward-in-Homestead-Robbery-of- 
US-Postal-Service-Worker— 235433211.html 



15. December 11, Los Angeles Times - (National) American Airlines fined $60,000 for 
violating price advertising rules. The U.S. Department of Transportation fined 
American Airlines $60,000 for falsely telling passengers that airline surcharges added 
to their fares were government taxes in violation of federal full-fare advertising rules. 
Source: http://www.latimes.com/business/travel/la-fi-mo-american-airline-fined- 
2013121 1,0,73 13 12.story 



16. December 10, Associated Press - (Nevada) Vegas rail line reopens after coal train 
derails. One locomotive and 19 rail cars of a California-bound Union Pacific train 
derailed and damaged the tracks December 8, blocking traffic and prompting the 
closure of the rail line in Fas Vegas while about 1,200 feet of tracks were replaced. The 
rail was back in service December 10. 

Source: http://www.lasvegassun.com/news/2013/dec/ll/vegas-rail-line-reopens-after- 
coal-train-derails/ 
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Food and Agriculture Sector 

17. December 12, Merced Sun-Star - (California) One killed, two injured in explosion. 

A fuel tank explosion on a ranch at Highway 59, north of Merced, California, killed 
one man and seriously injured two ranch workers December 11. 

Source: http ://www .mercedsunstar.com/20 13/12/11/33881 09/one-killed-two-inj ured- 
in-explosion.html 

18. December 11, Associated Press - (National) FDA takes steps to phase out antibiotics 
in meat. The U.S. Food and Drug Administration announced that it will ask 
pharmaceutical companies to voluntarily stop using some antibiotics to promote growth 
in animals in an effort to phase out the use of some antibiotics in animals processed for 
meat that have been linked to antibiotic -resistant diseases in humans. 

Source: http://abcnews.go.com/Health/wireStory/fda-targets-antibiotics-meat-21 175883 

19. December 11, WPTV 5 West Palm Beach - (Florida) Hazardous ammonia leak 
causes evacuations at Rich's Ice Cream on Dixie Highway. A chemical leak of 
anhydrous ammonia at the Rich's Ice Cream in West Palm Beach prompted the 
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evacuation of employees while HAZMAT units responded to the scene December 11. 
Twenty people were treated for exposure and two were taken to the hospital. 

Source: 

http://www.wptv.com/dpp/news/region c palm beach county/west palm beach/Haza 
rdous-ammonia-leak-causes-evacuations-at-Richs-Ice-Cream-on-Dixie-Highway 
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Water and Wastewater Systems Sector 

20. December 11, Associated Press - (New Hampshire) EPA names Farmington rubber 
plant a Superfund site. The U.S. Environmental Protection Agency (EPA) added the 
Collins & Aikman Plant of Farmington to the Superfund list of hazardous waste sites 
after the EPA found that an underground aquifer became contaminated with toxic 
chemicals from the facility. 

Source: http://www.sfgate.com/news/science/article/EPA-names-Farmington-rubber- 
plant-a-Superfund-site-5055612.php 

21. December 12, Triangle Business Journal - (North Carolina) Contaminated Oxford 
site makes EPA Superfund list. The U.S. Environmental Protection Agency added the 
former Cristex Drum knit fabric mill in Oxford, North Carolina, to its National 
Priorities List of Superfund sites after finding that the mill has been leaking chemicals 
into local groundwater, contaminating wetlands, and putting nearby Oak Ridge 
apartments at risk. 

Source: http://www.biziournals.com/triangle/blog/2013/12/contaminated-oxford-site- 
makes-epa.html 

22. December 12, WAVY 10 Portsmouth - (North Carolina) Boil water advisory issued 
for Corolla. Drinking water services were interrupted after a water line break in 
Corolla that prompted a boil water advisory notice due to potential contamination, 
remaining in effect until December 13. 

Source: http://www.wavv.com/news/north-carolina/boil-water-advisory-issued-for- 
corolla-nc 

23. December 12, Dredging News - (New Jersey) EPA adds Troy Chemical site to 
Superfund list. The Troy Chemical Corp., site in Newark was added to the U.S. 
Environmental Protection Agency’s Superfund list of most hazardous waste sites after 
past chemical manufacturing was found to have contaminated Pierson’s Creek with 
mercury and other pollutants. 

Source: http ://www.s andandgravel . com/new s/article .asp?vl=17902 
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Healthcare and Public Health Sector 

24. December 12, Santa Barbara Independent - (California) Records security breach at 
Cottage Hospital. Cottage Hospital notified 32,500 patients December 6 after security 
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protection limiting outside access to their health records was removed by a third party 
vendor, potentially leaving their medical information open to exposure. Patients seen at 
the Cottage Hospital’s Goleta, Santa Ynez, and Santa Barbara centers between 
September 2009 and December 2013 were affected. 

Source: http://www.independent.eom/news/2013/dec/l 1/records-security-breach- 
cottage-hospital/ 

25. December 11, KTVT 11 Fort Worth - (Texas) Crews squash fire at Dallas nursing 
home. Authorities are investigating the cause of a December 1 1 fire at a Dallas nursing 
home that prompted the evacuation of around 50 people while firefighters contained the 
blaze. 

Source: http : //dfw . cb slocal . com/20 13/12/11 /crew s - sq uash-fire-at-dallas -nur sin g-home/ 

26. December 10, WCBS 2 New York City - (National) Personal information at risk after 
laptops stolen from N.J. health insurance company. New Jersey-based Horizon Blue 
Cross Blue Shield notified nearly 840,000 of its members after two password-protected, 
but unencrypted laptops were stolen from its Newark headquarters that potentially 
contained member’s personal information, including Social Security numbers and 
clinical information. 

Source: http://newvork.cbslocal.corn/2013/12/10/personal-information-at-risk-after- 
laptops-stolen-from-n-j-health-insurance-company/?hpt=ju bn4 

For another story, see item 32 
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Government Facilities Sector 

27. December 12, Associated Press - (Florida) Ya. man charged in Florida with making 
supremacist threats against judge, prosecutor, FBI agent. A Virginia man was 
charged in Florida with making threats after he sent a series of electronic messages 
demanding the release of 14 people charged because of their connections to a white 
supremacist group and issued threats against a Florida attorney, a circuit judge, and FBI 
agent. 

Source: 

http://www.dailyioumal.net/view/story/b7a4fd8aa084459ebb89c9f53db75544/FL— 

White-Supremacist-Threats/ 

28. December 11, Tyler Morning Telegraph - (Texas) 69 children involved; 2 Athens 
ISD school buses collide; no serious injuries. An accident involving two Athens 
Independent School buses in Henderson County, Texas, prompted 69 children to be 
transported to an area hospital for minor injuries December 1 1 . 

Source: http://www.tylerpaper.com/TP-News+Local/191227/69-children-involved-2- 
athens-isd-school-buses-collide-no-serious-iniuries#.UqndEfRDtgl 

29. December 11, KGW 8 Portland - (Oregon) All power downtown back after Sunday 
outage. The Portland City Hall and Multnomah County Courthouse reopened 



- 7 - 



December 1 1 after a December 8 power outage knocked out service to the buildings 
and the surrounding area when an underground explosion blew off a manhole. 
Source: http://www.kgw.com/news/local/Multnornah-Couty-Courthouse-closed-on- 
Monday-23499332 1 .html 



30. December 11, KHON 2 Honolulu - (Hawaii) Waipahu students possibly sickened by 
school lunch. Authorities are investigating after approximately 40 students from 
Waipahu Elementary School in Honolulu fell ill December 10 with food poisoning-like 
symptoms. Twenty-five of those students were transported to an area hospital after 
paramedics were called to the school. 

Source: http://www.khon2.com/news/waipahu-students-possiblv-sickened-by-school- 
lunch 



31. December 11, CTNews.com - (Connecticut) Fire puts radio station off the air at UB. 
A December 1 1 roof fire at the University of Bridgeport’s John J. Cox Student Center 
prompted the building’s evacuation and closure while crews suppressed and 
investigated the blaze. A campus radio station, WPKN 89.5 FM Bridgeport, went off- 
air until December 12 due to the fire. 

Source: http://blog.ctnews.com/connecticutpostings/2013/12/ll/fire-puts-radio-station- 
off-the-air-at-ub/#18818101=0 



32. December 11, Associated Press - (Connecticut) UConn Health Center says employee 
inappropriately accessed patients’ personal information. The University of 
Connecticut Health Center notified 164 patients after an employee inappropriately 
accessed the patients’ personal information. The health center is investigating the 
breach that they discovered November 4, and the employee was placed on 
administrative leave. 

Source: 

http://www.tribtown.com/view/story/8dfllcl61064482cbeb49a2675634913/CT— 

Health-Center-Privacy-Breach 



33. December 11, WCBS 2 New York City - (New York) NYC Board of Health approves 
flu shot mandate for young children. The New York City Board of Health approved 
December 11a mandate that requires all children who go to preschool or day care in 
New York City to get flu shots. The new rule goes into effect in 30 days and is 
mandatory for children under 6 years old. 

Source: http://newyork.cbslocal.com/2013/12/ll/nyc-board-of-health-to-vote-on-flu- 
shot-mandate-for- young-children/ 

For another story, see item 11 



1 Return to top i 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

34. December 12, Help Net Security - (International) Facebook users hit with phishing 
and malware combo attack. SANS ISC researchers reported a phishing and 
malware delivery campaign targeting Facebook users. The campaign uses a malicious 
Tumblr link contained in a phishing message that directs users to a phishing page and 
then to a fake Youtube page that prompts the user to install a trojan disguised as an 
update. 

Source: http://www.net-securitv.org/malware news.php?id=2650 

35. December 12, Softpedia - (International) App that claims to notify users of Bitcoin 
market changes hides RAT. A researcher at Arbor Networks identified a malicious 
app named BitCoin Alarm that purports to offer users market information on Bitcoins 
but in fact contains a remote access trojan (RAT) called NetWiredRC designed to 
harvest login information. 

Source: http://news.softpedia.com/news/App-That-Clairns-to-Notify-Users-of- 
Bitcoin-Market-Changes-Hides-RAT-408736.shtml 

36. December 11, Dark Reading - (International) Cybercriminals now enlisting 
database cloud services. Researchers at Imperva discovered a new botnet used for 
stealing online banking credentials that uses cloud-based MSSQL databases for 
command and control functions and data storage. The malware infected at least 370 
systems in 5 days and could potentially be used to attack databases directly. 

Source: http://www.darkreading.com/attacks-breaches/cybercriminals-now-elisting- 
database-clo/240 1 64662 

37. December 11, IDG News Service - (International) Yahoo Mail still down for some 
users, after an attempted fix. Yahoo Mail experienced an outage beginning 
December 10 due to a hardware problem at one of Yahoo’s mail data centers. Some 
users continued to be unable to login December 1 1 . 

Source: http://www.networkworld.com/news/2013/121113-yahoo-mail-still-down-for- 
276846.html 

38. December 11, IDG News Service - (International) Nvidia exploit could turn render 
farms into password crackers, Bitcoin miners, researchers claim. Researchers at 
ReVuln identified a vulnerability in Nvidia’s Mental Ray 3D version 3.11.10 
rendering software, which could allow an attacker to inject a malicious remote library 
into a target system and gain control over rendering machines or render farms. The 
compromised machines could then be used for GPU-intensive tasks such as password 
cracking and Bitcoin mining. 

Source: http://www.networkworld.com/news/2013/121 1 13-nvidia- 
exploit-could-tum-render-276830.html 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

For another story, see item 31 
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Commercial Facilities Sector 

39. December 12, CBS Los Angeles - (California) 2 killed, 3 injured in ‘suspicious’ 
Echo Park apartment fire. A suspicious fire at an 1 1-unit building in Echo Park 
December 12 left two residents dead and three others injured. 

Source: http://losangeles.cbslocal.com/2013/12/12/2-killed-3-iniured-in-echo-park- 
apartment-fire/ 

40. DecemberU, WCPO 9 Cincinnati - (Ohio) Hazardous material causes explosion, 
fire in Winton Place. HAZMAT crews responded to Environmental Enterprises Inc., 
in Cincinnati after a fire and explosion December 1 1 in a flammable liquid storage 
area in the building. All employees were evacuated safely and no injuries were 
reported. 

Source: http://www.wcpo.com/news/local-news/hamilton- 

county/cincinnati/northside/hazardous-material-causes-explosion-fire-in-winton-place 

41. December 11, WOOD 8 Grand Rapids - (Michigan) Fire destroys apts; 2 people 
hurt. Eight apartments were destroyed in a fire at a 20-unit Otsego apartment 
complex December 10, leaving two injured and displacing around 12 residents. 
Source: http://www.woodtv.com/news/local/allegan-county/fire-at-otsego-apartment- 
complex-december- 11-2013 

42. December 11, WOOD 8 Grand Rapids - (Michigan) 11 fire depts. at Gentleman 
131 fire. Eleven firefighting departments were called to fight a fire at the Gentleman 
131 club December 1 1 in Mecosta Township. The complex is believed to be a total 
loss. 

Source: http://www.woodtv.eom/news/michigan/l 1-fire-depts-at-gentleman- 13 1-fire 

43. December 11, NewsOK.com - (Oklahoma) Natural gas leak in downtown 
Oklahoma City leads to the evacuation of about 60 people. 60 people were 
evacuated from three buildings in downtown Oklahoma City after a contractor 
working on construction caused a gas leak behind a nearby gas station December 11. 
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Source: http://newsok.com/natural-gas-leak-in-downtown-oklahoma-city-leads-to-the- 
evacuation-of-about-60-people/article/39 13543 

For another story, see item 21 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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